Privacy policy

Last updated: April 2025

1. Introduction

sixtyninebuild ("we", "us", or "our") operates sixtyninebuild.com (the "Website"). This Privacy Policy explains how we collect, use, and protect your personal data when you visit our Website or enquire about our web design services.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

For the purposes of UK GDPR, the data controller is:

sixtyninebuild

Website: sixtyninebuild.com

Email: sixtyninebuild@gmail.com

3. What Data We Collect

3.1 Information You Provide

When you contact us, submit an enquiry form, or engage with our services, we may collect:

Your full name
Your email address

We collect this information only when you voluntarily provide it to us.

3.2 Data Collected Automatically

When you browse our Website, we may automatically collect certain technical data, including:

Your IP address
Browser type and version
Pages visited and time spent on each page
Referring website (where you came from)
Date and time of your visit

This data is collected through cookies and similar tracking technologies. Please see Section 7 (Cookies) for more detail.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

To respond to your enquiries and provide quotations for web design services
To communicate with you about your project or ongoing work
To improve the performance and user experience of our Website
To analyse visitor behaviour through anonymised analytics
To comply with our legal obligations

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

Legitimate interests — to respond to enquiries and improve our Website
Contract — where we are taking steps to enter into, or performing, a contract with you
Consent — for non-essential cookies and analytics (you may withdraw consent at any time)

6. How Long We Keep Your Data

We retain personal data only for as long as necessary:

Enquiry and contact data: up to 2 years from last contact
Analytics data: typically anonymised or aggregated within 26 months

After the applicable retention period, your data will be securely deleted or anonymised.

7. Cookies

Our Website uses cookies to understand how visitors interact with our content. Cookies are small text files stored on your device.

7.1 Essential Cookies

These are necessary for the Website to function and cannot be disabled.

7.2 Analytics Cookies

We use analytics tools (such as Google Analytics) to collect anonymised data about how visitors use our Website. This helps us improve our content and user experience. These cookies are only set with your consent.

You can manage or disable cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use our Website.

8. Third-Party Services

We may use trusted third-party services to operate our Website or deliver our services, including:

Website hosting providers
Analytics platforms (e.g. Google Analytics)
Email or contact form platforms

These providers may process your data on our behalf as data processors. We ensure all third parties have appropriate data protection measures in place and, where required, Data Processing Agreements.

Some of these providers may be based outside the UK or EEA. In such cases, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in accordance with UK GDPR.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data (the ‘right to be forgotten’)
Right to restrict processing — to limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Rights related to automated decision-making — we do not carry out solely automated decisions

To exercise any of these rights, please contact us at: [your contact email]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include secure data storage, restricted access, and regular review of our data practices.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children’s Privacy

Our Website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The ‘Last updated’ date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: